Merge pull request 'Forced proto callback' (#13) from notifications into master

Reviewed-on: #13

ShopAdmin/Components/Layout/MainLayout.razor

@@ -1,19 +1,59 @@
 @inherits LayoutComponentBase
+@using Blazored.Toast
+@using Microsoft.AspNetCore.Components.Authorization
 
-<div class="page">
+<header class="top-bar">
-    <main>
+    <a href="/" class="brand">
-        <div class="top-row px-4">
+        <svg class="brand-mark" viewBox="0 0 100 100" preserveAspectRatio="xMidYMid meet" xmlns="http://www.w3.org/2000/svg">
-            <a href="https://learn.microsoft.com/aspnet/core/" target="_blank">About</a>
+            <path d="M70,25 C65,18 58,15 50,15 C30,15 15,30 15,50 C15,70 30,85 50,85 C58,85 65,82 70,75 L62,68 C58,72 54,74 50,74 C37,74 27,63 27,50 C27,37 37,26 50,26 C54,26 58,28 62,32 L70,25 Z" fill="#0096c7" />
+            <circle cx="85" cy="50" r="8" fill="#4dabff" opacity="0.9" />
+            <circle cx="75" cy="80" r="5" fill="#4dabff" opacity="0.6" />
+            <circle cx="75" cy="20" r="5" fill="#4dabff" opacity="0.6" />
+        </svg>
+
+        <div class="text-column">
+            <span class="brand-main">Lite<span class="brand-accent">Charms</span></span>
+            <span class="payoff-line">Shop Administration &amp; Monitoring</span>
         </div>
+    </a>
 
-        <article class="content px-4">
+    <TopBarAuthstateView />
-            @* @Body *@
+</header>
-        </article>
-    </main> 
-</div>
 
-<div id="blazor-error-ui" data-nosnippet>
+<CascadingAuthenticationState>
-    An unhandled error has occurred.
+    <AuthorizeView>
-    <a href="." class="reload">Reload</a>
+        <Authorized>
-    <span class="dismiss">🗙</span>
+            <NavShelf IsOpen="isShelfExpanded" IsOpenChanged="OnShelfStateChanged" @rendermode="InteractiveServer" />
-</div>
+        </Authorized>
+    </AuthorizeView>
+</CascadingAuthenticationState>
+
+<CascadingAuthenticationState>
+    <div class="page-wrapper @(isShelfExpanded ? "shifted-canvas" : "")">
+        <AuthorizeView>
+            <Authorized>
+                <main class="content-body">
+                    @Body
+                </main>
+            </Authorized>
+            <NotAuthorized>
+                <Login />
+            </NotAuthorized>
+        </AuthorizeView>
+    </div>
+</CascadingAuthenticationState>
+
+<BlazoredToasts />
+
+@code {
+    private bool isShelfExpanded { get; set; } = false;
+
+    private void OnShelfStateChanged(bool newState)
+    {
+        isShelfExpanded = newState;
+
+        // This forces Blazor to re-evaluate the DOM, instantly applying
+        // the "shelf-open" and "shifted-canvas" CSS utility classes.
+        StateHasChanged();
+    }
+}

ShopAdmin/Components/Layout/MainLayout.razor.css

@@ -1,98 +1,92 @@
-.page {
+/* --- Blazored Toast Branded Styling --- */
-    position: relative;
+::deep .blazored-toast-container {
+    position: fixed;
+    bottom: 20px;
+    left: 20px;
+    z-index: 9999;
+    display: flex;
+    flex-direction: column-reverse;
+    gap: 12px;
+    width: 350px;
+    pointer-events: none;
+}
+
+::deep .blazored-toast {
+    pointer-events: auto;
     display: flex;
     flex-direction: column;
+    position: relative;
+    background: rgba(11, 17, 20, 0.95);
+    backdrop-filter: blur(10px);
+    border: 1px solid rgba(0, 150, 199, 0.3);
+    border-left: 4px solid #0096c7;
+    border-radius: 8px;
+    padding: 16px 40px 16px 16px;
+    color: #fff;
+    box-shadow: 0 10px 30px rgba(0, 0, 0, 0.5);
+    animation: slideInLeft 0.3s ease-out;
 }
 
-main {
+::deep .blazored-toast-header {
-    flex: 1;
+    font-weight: 800;
+    font-size: 1rem;
+    color: #0096c7;
+    margin-bottom: 4px;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
 }
 
-.sidebar {
+::deep .blazored-toast-message {
-    background-image: linear-gradient(180deg, rgb(5, 39, 103) 0%, #3a0647 70%);
+    font-size: 0.9rem;
+    color: #e0e0e0;
+    line-height: 1.4;
 }
 
-.top-row {
+::deep .blazored-toast-close {
-    background-color: #f7f7f7;
+    position: absolute;
-    border-bottom: 1px solid #d6d5d5;
+    top: 12px;
-    justify-content: flex-end;
+    right: 12px;
-    height: 3.5rem;
+    cursor: pointer;
-    display: flex;
+    background: none;
-    align-items: center;
+    border: none;
+    color: #888;
+    font-size: 20px;
+    line-height: 1;
+    transition: color 0.2s ease;
 }
 
-    .top-row ::deep a, .top-row ::deep .btn-link {
+    ::deep .blazored-toast-close::before {
-        white-space: nowrap;
+        content: "×";
-        margin-left: 1.5rem;
-        text-decoration: none;
     }
 
-    .top-row ::deep a:hover, .top-row ::deep .btn-link:hover {
+    ::deep .blazored-toast-close:hover {
-        text-decoration: underline;
+        color: #ff4d4d;
     }
 
-    .top-row ::deep a:first-child {
+::deep .blazored-toast-progressbar {
-        overflow: hidden;
+    position: absolute;
-        text-overflow: ellipsis;
-    }
-
-@media (max-width: 640.98px) {
-    .top-row {
-        justify-content: space-between;
-    }
-
-    .top-row ::deep a, .top-row ::deep .btn-link {
-        margin-left: 0;
-    }
-}
-
-@media (min-width: 641px) {
-    .page {
-        flex-direction: row;
-    }
-
-    .sidebar {
-        width: 250px;
-        height: 100vh;
-        position: sticky;
-        top: 0;
-    }
-
-    .top-row {
-        position: sticky;
-        top: 0;
-        z-index: 1;
-    }
-
-    .top-row.auth ::deep a:first-child {
-        flex: 1;
-        text-align: right;
-        width: 0;
-    }
-
-    .top-row, article {
-        padding-left: 2rem !important;
-        padding-right: 1.5rem !important;
-    }
-}
-
-#blazor-error-ui {
-    color-scheme: light only;
-    background: lightyellow;
     bottom: 0;
-    box-shadow: 0 -1px 2px rgba(0, 0, 0, 0.2);
-    box-sizing: border-box;
-    display: none;
     left: 0;
-    padding: 0.6rem 1.25rem 0.7rem 1.25rem;
+    height: 3px;
-    position: fixed;
+    background: rgba(0, 150, 199, 0.5);
-    width: 100%;
-    z-index: 1000;
 }
 
-    #blazor-error-ui .dismiss {
+@keyframes slideInLeft {
-        cursor: pointer;
+    from {
-        position: absolute;
+        transform: translateX(-100%);
-        right: 0.75rem;
+        opacity: 0;
-        top: 0.5rem;
     }
+
+    to {
+        transform: translateX(0);
+        opacity: 1;
+    }
+}
+
+@media (max-width: 480px) {
+    ::deep .blazored-toast-container {
+        width: calc(100% - 40px);
+        left: 20px;
+        bottom: 20px;
+    }
+}

ShopAdmin/Components/Pages/Counter.razor

@@ -1,19 +0,0 @@
-@page "/counter"
-@rendermode InteractiveServer
-
-<PageTitle>Counter</PageTitle>
-
-<h1>Counter</h1>
-
-<p role="status">Current count: @currentCount</p>
-
-<button class="btn btn-primary" @onclick="IncrementCount">Click me</button>
-
-@code {
-    private int currentCount = 0;
-
-    private void IncrementCount()
-    {
-        currentCount++;
-    }
-}

ShopAdmin/Components/Pages/Home.razor

@@ -0,0 +1,3 @@
+@page "/"
+
+

ShopAdmin/Components/Pages/Login.razor

@@ -0,0 +1,84 @@
+@page "/login"
+@using Microsoft.AspNetCore.Components.Authorization
+@inject NavigationManager Navigation
+@rendermode InteractiveServer
+
+<div class="auth-workspace-canvas">
+    <div class="tech-background-matrix">
+        <svg class="bg-vector-mesh" viewBox="0 0 800 500" xmlns="http://www.w3.org/2000/svg">
+            <defs>
+                <pattern id="cyber-grid" width="40" height="40" patternUnits="userSpaceOnUse">
+                    <path d="M 40 0 L 0 0 0 40" fill="none" stroke="#102a35" stroke-width="0.75" />
+                    <circle cx="40" cy="40" r="1" fill="#173b4a" />
+                </pattern>
+
+                <filter id="core-blue-glow" x="-20%" y="-20%" width="140%" height="140%">
+                    <feGaussianBlur stdDeviation="6" result="blur" />
+                    <feComposite in="SourceGraphic" in2="blur" operator="over" />
+                </filter>
+            </defs>
+
+            <rect width="100%" height="100%" fill="url(#cyber-grid)" opacity="0.6" />
+
+            <g class="tech-circuit-left" stroke="#0091ff" stroke-width="1.25" fill="none" opacity="0.35">
+                <path d="M -50,250 L 120,250 L 180,190 L 250,190" />
+                <path d="M 40,100 L 100,160 L 100,340 L 160,400" />
+                <polyline points="220,160 240,190 220,220" />
+                <circle cx="250" cy="190" r="3" fill="#0091ff" />
+                <polygon points="30,200 60,170 90,170 60,200" stroke="#00bfff" stroke-width="1" opacity="0.5" />
+                <polygon points="110,300 130,280 160,280 140,300" stroke="#00bfff" stroke-width="1" opacity="0.3" />
+            </g>
+
+            <g class="tech-circuit-right" stroke="#00bfff" stroke-width="1.25" fill="none" opacity="0.35">
+                <path d="M 850,250 L 680,250 L 620,310 L 550,310" />
+                <path d="M 760,400 L 700,340 L 700,160 L 640,100" />
+                <polyline points="580,340 560,310 580,280" />
+                <circle cx="550" cy="310" r="3" fill="#00bfff" />
+                <polygon points="770,300 740,330 710,330 740,300" stroke="#0091ff" stroke-width="1" opacity="0.5" />
+                <polygon points="690,200 670,220 640,220 660,200" stroke="#0091ff" stroke-width="1" opacity="0.3" />
+            </g>
+
+            <g class="center-target" stroke="#0091ff" fill="none" opacity="0.15">
+                <circle cx="400" cy="250" r="90" stroke-dasharray="8 6" />
+                <circle cx="400" cy="250" r="130" />
+                <line x1="400" y1="80" x2="400" y2="420" stroke-dasharray="4 4" />
+                <line x1="220" y1="250" x2="580" y2="250" stroke-dasharray="4 4" />
+            </g>
+        </svg>
+    </div>
+
+    <div class="login-action-container">
+        <header class="login-header">
+            <span class="security-status-tag">SYSTEM_LOCKOUT_ACTIVE</span>
+            <h1 class="login-title">Console Authentication Required</h1>
+            <p class="login-subtitle">Initialize terminal authorization pipeline to access core application monitors.</p>
+        </header>
+
+        <button class="login-cta-button" @onclick="HandleLogin">
+            <span class="btn-glow-layer"></span>
+            <span class="btn-text-content">INITIALIZE SECURE ACCESS</span>
+            <svg class="btn-arrow-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5">
+                <line x1="5" y1="12" x2="19" y2="12"></line>
+                <polyline points="12 5 19 12 12 19"></polyline>
+            </svg>
+        </button>
+    </div>
+</div>
+
+@code {
+    [CascadingParameter]
+    private Task<AuthenticationState>? AuthState { get; set; }
+
+    protected override async Task OnInitializedAsync()
+    {
+        if (AuthState is not null)
+        {
+            var state = await AuthState;
+
+            if (state.User.Identity?.IsAuthenticated ?? false) 
+                Navigation.NavigateTo("/", replace: true);
+        }
+    }
+
+    private void HandleLogin() => Navigation.NavigateTo("/auth/login", forceLoad: true);
+}

ShopAdmin/Components/Pages/Login.razor.css

@@ -0,0 +1,143 @@
+/* Login.razor.css */
+
+.auth-workspace-canvas {
+    position: relative;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    width: 100%;
+    height: 100%;
+    min-height: calc(100vh - var(--header-height, 92px));
+    background-color: #010405; /* Matches your core console background depth */
+    overflow: hidden;
+    box-sizing: border-box;
+    padding: 24px;
+}
+
+/* BOUNDLESS TECH BACKGROUND ANIMATION & MAPPING */
+.tech-background-matrix {
+    position: absolute;
+    top: 50%;
+    left: 50%;
+    width: 140%;
+    height: 140%;
+    transform: translate(-50%, -50%);
+    pointer-events: none;
+    z-index: 1;
+}
+
+.bg-vector-mesh {
+    width: 100%;
+    height: 100%;
+    object-fit: cover;
+}
+
+/* Subtle technological pulse across background circuit networks */
+.tech-circuit-left, .tech-circuit-right {
+    animation: background-circuit-glow 6s ease-in-out infinite alternate;
+}
+
+.tech-circuit-right {
+    animation-delay: 3s;
+}
+
+/* THE CONTAINER PAYLOAD */
+.login-action-container {
+    position: relative;
+    z-index: 2;
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    text-align: center;
+    max-width: 520px;
+    padding: 40px;
+    box-sizing: border-box;
+}
+
+.login-header {
+    margin-bottom: 36px;
+}
+
+.security-status-tag {
+    font-family: monospace;
+    font-size: 11px;
+    font-weight: 700;
+    color: #ffd166; /* Matches your top bar warning lock indicator token */
+    background: rgba(255, 209, 102, 0.07);
+    border: 1px solid rgba(255, 209, 102, 0.25);
+    padding: 4px 10px;
+    border-radius: 2px;
+    letter-spacing: 1px;
+    text-transform: uppercase;
+}
+
+.login-title {
+    font-size: 26px;
+    font-weight: 700;
+    color: #ffffff;
+    margin: 20px 0 10px 0;
+    letter-spacing: -0.5px;
+}
+
+.login-subtitle {
+    font-size: 14px;
+    font-weight: 400;
+    color: #8fa3ad;
+    line-height: 1.5;
+}
+
+/* THE INVITING LARGE CALL TO ACTION BUTTON */
+.login-cta-button {
+    position: relative;
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 12px;
+    width: 100%;
+    max-width: 320px;
+    height: 54px;
+    background: #0087f5; /* Core premium brand interaction blue */
+    color: #ffffff;
+    border: none;
+    border-radius: 4px;
+    font-size: 14px;
+    font-weight: 700;
+    letter-spacing: 0.5px;
+    cursor: pointer;
+    overflow: hidden;
+    box-shadow: 0 4px 20px rgba(0, 135, 245, 0.3);
+    transition: all 0.25s cubic-bezier(0.2, 0.8, 0.2, 1);
+}
+
+    .login-cta-button:hover {
+        background: #0091ff;
+        transform: translateY(-2px);
+        box-shadow: 0 0 24px rgba(0, 145, 255, 0.6);
+    }
+
+    .login-cta-button:active {
+        transform: translateY(0);
+    }
+
+.btn-arrow-icon {
+    width: 16px;
+    height: 16px;
+    transition: transform 0.25s ease;
+}
+
+.login-cta-button:hover .btn-arrow-icon {
+    transform: translateX(4px);
+}
+
+/* KEYFRAMES */
+@keyframes background-circuit-glow {
+    0% {
+        opacity: 0.25;
+        filter: drop-shadow(0 0 1px rgba(0, 145, 255, 0));
+    }
+
+    100% {
+        opacity: 0.55;
+        filter: drop-shadow(0 0 6px rgba(0, 191, 255, 0.4));
+    }
+}

ShopAdmin/Components/Pages/NavShelf.razor

@@ -0,0 +1,120 @@
+@inject NavigationManager NavManager
+
+<button class="shelf-grip @(IsOpen ? "grip-open" : "")"
+        @onclick="ToggleShelf"
+        aria-label="Toggle Navigation Shelf">
+    <div class="grip-icon">
+        @if (IsOpen)
+        {
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round">
+                <polyline points="9 18 15 12 9 6"></polyline>
+            </svg>
+        }
+        else
+        {
+            <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round">
+                <line x1="3" y1="12" x2="21" y2="12"></line>
+                <line x1="3" y1="6" x2="21" y2="6"></line>
+                <line x1="3" y1="18" x2="21" y2="18"></line>
+            </svg>
+        }
+    </div>
+</button>
+
+<div class="shelf-backdrop @(IsOpen ? "backdrop-active" : "")" @onclick="CloseShelf"></div>
+
+<aside class="nav-shelf-panel @(IsOpen ? "shelf-open" : "")">
+    <div class="shelf-header">
+        <h3>Shop Console</h3>
+        <span class="environment-badge">@Environment.GetEnvironmentVariable("ASPNETCORE_ENVIRONMENT")</span>
+    </div>
+
+    <nav class="shelf-navigation">
+        <NavLink class="shelf-link" href="" Match="NavLinkMatch.All" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="3" width="7" height="9"></rect><rect x="14" y="3" width="7" height="5"></rect><rect x="14" y="12" width="7" height="9"></rect><rect x="3" y="16" width="7" height="5"></rect></svg>
+            <span>Dashboard</span>
+        </NavLink>
+
+        <NavLink class="shelf-link" href="customers" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path><circle cx="9" cy="7" r="4"></circle><path d="M23 21v-2a4 4 0 0 0-3-3.87"></path><path d="M16 3.13a4 4 0 0 1 0 7.75"></path></svg>
+            <span>Customers</span>
+        </NavLink>
+
+        <NavLink class="shelf-link" href="orders" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 2L3 6v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6l-3-4z"></path><line x1="3" y1="6" x2="21" y2="6"></line><path d="M16 10a4 4 0 0 1-8 0"></path></svg>
+            <span>Orders</span>
+        </NavLink>
+
+        <NavLink class="shelf-link" href="leads" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"></path><polyline points="22 4 12 14.01 9 11.01"></polyline></svg>
+            <span>Leads</span>
+        </NavLink>
+
+        <NavLink class="shelf-link" href="products" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M20.59 13.41l-7.17 7.17a2 2 0 0 1-2.83 0L2 12V2h10l8.59 8.59a2 2 0 0 1 0 2.82z"></path><line x1="7" y1="7" x2="7.01" y2="7"></line></svg>
+            <span>Products</span>
+        </NavLink>
+
+        <NavLink class="shelf-link" href="notifications" @onclick="CloseShelf">
+            <svg class="link-icon icon-warn" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9"></path><path d="M13.73 21a2 2 0 0 1-3.46 0"></path></svg>
+            <span>Notifications</span>
+        </NavLink>
+
+        <div class="shelf-divider"></div>        
+
+        <NavLink class="shelf-link" href="@ProfileUrl" target="_blank" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <path d="M20 21v-2a4 4 0 0 0-4-4H8a4 4 0 0 0-4 4v2"></path>
+                <circle cx="12" cy="7" r="4"></circle>
+            </svg>
+            <span>Profile</span>
+        </NavLink>
+
+        <NavLink class="shelf-link" href="auth/logout" ForceLoad="true" @onclick="CloseShelf">
+            <svg class="link-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+                <path d="M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4"></path>
+                <polyline points="16 17 21 12 16 7"></polyline>
+                <line x1="21" y1="12" x2="9" y2="12"></line>
+            </svg>
+            <span>Logout</span>
+        </NavLink>
+    </nav>
+</aside>
+
+@code {
+    [Parameter] public bool IsOpen { get; set; } = false;
+    [Parameter] public EventCallback<bool> IsOpenChanged { get; set; }
+
+    [Inject] private IConfiguration? Configuration { get; set; }
+
+    private string? ProfileUrl { get; set; }
+
+    protected override void OnInitialized()
+    {
+        if (Configuration is null) return;
+
+        var authority = Configuration["IdKongisa:Authority"];
+
+        if (!string.IsNullOrWhiteSpace(authority))
+        {
+            var uri = new Uri(authority);
+            
+            ProfileUrl = $"{uri.Scheme}://{uri.Host}/if/user/#/settings";
+        }
+    }
+
+    private async Task ToggleShelf()
+    {
+        IsOpen = !IsOpen;
+        await IsOpenChanged.InvokeAsync(IsOpen);
+    }
+
+    private async Task CloseShelf()
+    {
+        if (IsOpen)
+        {
+            IsOpen = false;
+            await IsOpenChanged.InvokeAsync(IsOpen);
+        }
+    }
+}

ShopAdmin/Components/Pages/NavShelf.razor.css

@@ -0,0 +1,169 @@
+/* --- 1. The Flyout Side Panel --- */
+.nav-shelf-panel {
+    position: fixed;
+    top: var(--header-height);
+    right: -300px;
+    width: 300px;
+    height: calc(100vh - var(--header-height));
+    background-color: var(--shelf-bg);
+    border-left: 1px solid rgba(144, 224, 239, 0.15);
+    z-index: 2000;
+    display: flex;
+    flex-direction: column;
+    /* MODIFIED: Reduce padding-bottom so items don't clip raw against the bottom line window frame */
+    padding: 2rem 1.5rem 1rem 1.5rem;
+    box-sizing: border-box;
+    transition: right 0.35s cubic-bezier(0.16, 1, 0.3, 1);
+    box-shadow: -15px 0 40px rgba(0, 0, 0, 0.6);
+}
+
+    .nav-shelf-panel.shelf-open {
+        right: 0; /* Animate into viewport */
+    }
+
+/* --- 2. The Floating Mechanical Grip Handle --- */
+.shelf-grip {
+    position: fixed;
+    top: calc(var(--header-height) + 24px);
+    right: 0;
+    width: 44px;
+    height: 44px;
+    background-color: var(--shelf-bg);
+    border: 1px solid var(--border-mid-opacity);
+    border-right: none;
+    border-radius: 8px 0 0 8px;
+    color: var(--payoff-color);
+    cursor: pointer;
+    z-index: 2001;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: right 0.35s cubic-bezier(0.16, 1, 0.3, 1), background-color 0.2s ease;
+}
+
+    /* Moves out dynamically alongside the shelf edge when open */
+    .shelf-grip.grip-open {
+        right: 300px;
+        background-color: var(--shelf-bg);
+        border-color: var(--border-low-opacity);
+    }
+
+    .shelf-grip:hover {
+        background-color: #112930;
+        color: var(--text-white);
+    }
+
+.grip-icon {
+    width: 20px;
+    height: 20px;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+
+/* --- 3. Panel Internal Layout & Links --- */
+.shelf-header {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    margin-bottom: 2rem;
+    padding-bottom: 1rem;
+    border-bottom: 1px solid rgba(144, 224, 239, 0.1);
+    flex-shrink: 0; /* CRITICAL: Prevents the header text from squishing up on small screens */
+}
+
+    .shelf-header h3 {
+        font-size: 1.1rem;
+        font-weight: 700;
+        color: var(--text-white);
+        margin: 0;
+    }
+
+.environment-badge {
+    font-size: 0.65rem;
+    font-family: monospace;
+    font-weight: bold;
+    padding: 2px 6px;
+    background: rgba(0, 150, 199, 0.15);
+    border: 1px solid rgba(0, 150, 199, 0.4);
+    color: var(--payoff-color);
+    border-radius: 4px;
+}
+
+.shelf-navigation {
+    display: flex;
+    flex-direction: column;
+    gap: 8px;
+    /* NEW RULES: Absorb all available viewport height and isolate scrolling bounds */
+    flex: 1;
+    overflow-y: auto;
+    overflow-x: hidden;
+    /* Optional: Adds smooth mobile elastic touch responses on iOS devices */
+    -webkit-overflow-scrolling: touch;
+    /* Clean up spacing so bottom-most links have breathing room when fully scrolled down */
+    padding-bottom: 2rem;
+}
+
+/* Deep selection matching Blazor's active class matching system */
+::deep .shelf-link {
+    display: flex;
+    align-items: center;
+    gap: 14px;
+    color: rgba(255, 255, 255, 0.65);
+    text-decoration: none;
+    padding: 12px 16px;
+    font-size: 0.95rem;
+    font-weight: 500;
+    border-radius: 6px;
+    transition: all 0.2s ease;
+}
+
+    ::deep .shelf-link:hover {
+        background-color: rgba(0, 150, 199, 0.08);
+        color: var(--text-white);
+    }
+
+    ::deep .shelf-link.active {
+        background-color: var(--brand-blue);
+        color: var(--text-white);
+        font-weight: 600;
+    }
+
+.link-icon {
+    width: 18px;
+    height: 18px;
+    opacity: 0.8;
+}
+
+.icon-warn {
+    color: var(--payoff-color);
+}
+
+.shelf-divider {
+    height: 1px;
+    background: rgba(144, 224, 239, 0.1);
+    margin: 1rem 0;
+}
+
+/* --- 4. Content Blur/Backdrop Overlay --- */
+.shelf-backdrop {
+    position: fixed;
+    top: var(--header-height);
+    left: 0;
+    width: 100vw;
+    height: calc(100vh - var(--header-height));
+    background-color: rgba(0, 0, 0, 0.25);
+    backdrop-filter: blur(0px);
+    z-index: 1999;
+    opacity: 0;
+    visibility: hidden;
+    pointer-events: none;
+    transition: opacity 0.3s ease, backdrop-filter 0.3s ease;
+}
+
+    .shelf-backdrop.backdrop-active {
+        opacity: 1;
+        visibility: visible;
+        pointer-events: auto;
+        backdrop-filter: blur(3px);
+    }

ShopAdmin/Components/Pages/NotFound.razor

@@ -1,5 +1,40 @@
-@page "/not-found"
+@page "/404"
-@layout MainLayout
+@page "/not-found"
 
-<h3>Not Found</h3>
+<div class="error-container">
-<p>Sorry, the content you are looking for does not exist</p>
+    <div class="error-visual">
+        <svg viewBox="0 0 200 200" fill="none" xmlns="http://www.w3.org/2000/svg" class="tech-svg">
+            <line x1="20" y1="100" x2="180" y2="100" stroke="rgba(144, 224, 239, 0.08)" stroke-width="2" stroke-dasharray="4 4" />
+            <line x1="100" y1="20" x2="100" y2="180" stroke="rgba(144, 224, 239, 0.08)" stroke-width="2" stroke-dasharray="4 4" />
+
+            <circle cx="100" cy="100" r="70" stroke="var(--brand-blue)" stroke-width="1.5" stroke-dasharray="5 10" opacity="0.4" />
+            <circle cx="100" cy="100" r="50" stroke="var(--payoff-color)" stroke-width="1" opacity="0.15" />
+
+            <path d="M65,65 L135,135" stroke="var(--brand-blue)" stroke-width="2" stroke-linecap="round" opacity="0.3" />
+            <path d="M135,65 L65,135" stroke="rgba(144, 224, 239, 0.2)" stroke-width="1.5" stroke-linecap="round" />
+
+            <circle cx="100" cy="100" r="14" fill="var(--bar-bg)" stroke="var(--brand-blue)" stroke-width="3" />
+            <circle cx="100" cy="100" r="4" fill="#4dabff" />
+
+            <circle cx="65" cy="65" r="6" fill="var(--bar-bg)" stroke="var(--payoff-color)" stroke-width="2" />
+            <circle cx="135" cy="65" r="6" fill="var(--bar-bg)" stroke="var(--payoff-color)" stroke-width="2" />
+            <circle cx="135" cy="135" r="6" fill="var(--bar-bg)" stroke="var(--payoff-color)" stroke-width="2" />
+            <circle cx="65" cy="135" r="6" fill="var(--bar-bg)" stroke="var(--payoff-color)" stroke-width="2" />
+        </svg>
+    </div>
+
+    <div class="error-meta">
+        <h1 class="error-code">404</h1>
+        <h2 class="error-title">Resource Location Failure</h2>
+        <p class="error-desc">
+            The operational route, package schema, or data record you are querying cannot be resolved within this cluster context.
+        </p>
+        <a href="/" class="btn-return">
+            <svg class="icon-left" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round">
+                <line x1="19" y1="12" x2="5" y2="12"></line>
+                <polyline points="12 19 5 12 12 5"></polyline>
+            </svg>
+            Return to Core Dashboard
+        </a>
+    </div>
+</div>

ShopAdmin/Components/Pages/NotFound.razor.css

@@ -0,0 +1,102 @@
+.error-container {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    text-align: center;
+    padding: 2rem;
+    max-width: 520px;
+    width: 100%;
+    margin: auto; /* Works alongside layout flex to keep perfectly centered */
+    animation: fadeIn 0.4s ease-out;
+}
+
+/* Technical SVG Frame Handling */
+.error-visual {
+    width: 160px;
+    height: 160px;
+    margin-bottom: 1.5rem;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+}
+
+.tech-svg {
+    width: 100%;
+    height: 100%;
+    filter: drop-shadow(0 0 25px rgba(0, 150, 199, 0.25));
+}
+
+/* Typography Hierarchy */
+.error-code {
+    font-family: 'Poppins', sans-serif;
+    font-size: 3.5rem;
+    font-weight: 900;
+    line-height: 1;
+    color: var(--brand-blue);
+    letter-spacing: -1px;
+    margin: 0 0 0.5rem 0;
+    text-shadow: 0 0 20px rgba(0, 150, 199, 0.2);
+}
+
+.error-title {
+    font-size: 1.25rem;
+    font-weight: 700;
+    color: var(--text-white);
+    margin-bottom: 0.75rem;
+    letter-spacing: -0.2px;
+}
+
+.error-desc {
+    font-size: 0.9rem;
+    line-height: 1.6;
+    color: var(--payoff-color);
+    opacity: 0.75;
+    margin-bottom: 2rem;
+}
+
+/* Control Actions styled precisely to match your existing brand colors */
+.btn-return {
+    display: inline-flex;
+    align-items: center;
+    gap: 10px;
+    background-color: rgba(0, 150, 199, 0.08);
+    color: var(--text-white);
+    border: 1px solid rgba(0, 150, 199, 0.4);
+    padding: 12px 28px;
+    border-radius: 6px;
+    font-weight: 600;
+    font-size: 0.95rem;
+    text-decoration: none;
+    cursor: pointer;
+    transition: all 0.25s ease;
+}
+
+    .btn-return:hover {
+        background-color: var(--brand-blue);
+        border-color: var(--hover-blue);
+        transform: translateY(-1px);
+        box-shadow: 0 4px 20px rgba(0, 150, 199, 0.3);
+    }
+
+.icon-left {
+    width: 16px;
+    height: 16px;
+    transition: transform 0.25s ease;
+}
+
+.btn-return:hover .icon-left {
+    transform: translateX(-3px);
+}
+
+@keyframes fadeIn {
+    from {
+        opacity: 0;
+        transform: translateY(10px);
+    }
+
+    to {
+        opacity: 1;
+        transform: translateY(0);
+    }
+}

ShopAdmin/Components/Routes.razor

@@ -1,6 +1,11 @@
-<Router AppAssembly="typeof(Program).Assembly" NotFoundPage="typeof(Pages.NotFound)">
+<Router AppAssembly="@typeof(Program).Assembly">
     <Found Context="routeData">
-        <RouteView RouteData="routeData" DefaultLayout="typeof(Layout.MainLayout)" />
+        <RouteView RouteData="@routeData" DefaultLayout="@typeof(MainLayout)" />
-        <FocusOnNavigate RouteData="routeData" Selector="h1" />
+        <FocusOnNavigate RouteData="@routeData" Selector="h1" />
     </Found>
-</Router>
+    <NotFound>
+        <LayoutView Layout="@typeof(MainLayout)">
+            <ShopAdmin.Components.Pages.NotFound /> 
+        </LayoutView>
+    </NotFound>
+</Router>

ShopAdmin/Components/TopBarAuthstateView.razor

@@ -0,0 +1,67 @@
+@using Microsoft.AspNetCore.Components.Authorization
+<div class="auth-state-container">
+    <AuthorizeView>
+        <Authorized>
+            <div class="auth-indicator authenticated">
+                <div class="user-meta-stack">
+                    <span class="meta-row-primary">@Name</span>
+                    <span class="meta-row-secondary">@Email</span>
+                    <span class="meta-row-secondary">@LoginTime</span>
+                </div>
+            </div>
+        </Authorized>
+        <NotAuthorized>
+            <div class="auth-indicator unauthenticated">
+                <svg class="security-lock-vector" viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg">
+                    <defs>
+                        <filter id="amber-cyber-glow" x="-30%" y="-30%" width="160%" height="160%">
+                            <feGaussianBlur stdDeviation="3.5" result="blur" />
+                            <feComposite in="SourceGraphic" in2="blur" operator="over" />
+                        </filter>
+                    </defs>
+
+                    <g class="lock-chassis" filter="url(#amber-cyber-glow)">
+                        <path d="M 32,45 V 24 L 38,18 H 62 L 68,24 V 45" stroke="#ffd166" stroke-width="3.5" fill="none" stroke-linecap="square" stroke-linejoin="miter" />
+
+                        <rect x="20" y="45" width="60" height="32" fill="#03090b" stroke="#ffd166" stroke-width="3.5" stroke-linejoin="miter" />
+
+                        <polygon points="47,54 53,54 55,60 45,60" fill="#ffd166" />
+                        <rect x="48.5" y="60" width="3" height="10" fill="#ffd166" />
+                    </g>
+                </svg>
+            </div>
+        </NotAuthorized>
+    </AuthorizeView>
+</div>
+
+@code {
+    [CascadingParameter]
+    private Task<AuthenticationState>? AuthStateTask { get; set; }
+
+    private System.Security.Claims.ClaimsPrincipal? UserPrincipal;
+
+    private string? Name { get; set; }
+    private string? Email { get; set; }
+    private DateTime? LoginTime { get; set; }
+
+    protected override async Task OnInitializedAsync()
+    {
+        if (AuthStateTask != null)
+        {
+            var authState = await AuthStateTask;
+
+            UserPrincipal = authState.User;
+
+            Name = UserPrincipal?.Identity?.Name;
+            Email = UserPrincipal?.FindFirst(System.Security.Claims.ClaimTypes.Email)?.Value;
+
+            var authTimeClaim = UserPrincipal?.FindFirst("auth_time")?.Value;
+
+            if (!string.IsNullOrEmpty(authTimeClaim) && long.TryParse(authTimeClaim, out long unixSeconds))
+            {
+                var dateTimeOffset = DateTimeOffset.FromUnixTimeSeconds(unixSeconds);
+                LoginTime = dateTimeOffset.LocalDateTime;
+            }
+        }
+    }
+}

ShopAdmin/Components/TopBarAuthstateView.razor.css

@@ -0,0 +1,87 @@
+/* TopBarAuthstateView.razor.css */
+
+.auth-state-container {
+    display: flex;
+    align-items: center;
+    justify-content: flex-end;
+    /* REMOVED min-width: 160px; -> Let the box collapse to exactly the icon's width */
+    width: auto;
+    height: 100%;
+    /* Sliced down to a tight, crisp margin from the right browser edge */
+    padding-right: 6px;
+    box-sizing: border-box;
+    /* Keeps it anchored to the far right side of your header layout layout */
+    margin-left: auto;
+}
+
+.auth-indicator {
+    display: flex;
+    flex-direction: column;
+    align-items: flex-end;
+    justify-content: center;
+    height: 100%;
+    width: auto; /* Collapses container layout tight */
+}
+
+/* Pristine yellow security lock vector */
+.security-lock-vector {
+    width: auto;
+    height: 48px; /* Preserved your ideal visual size */
+    overflow: visible;
+}
+
+/* Subtle hardware-accelerated technological power-hum pulse */
+.unauthenticated .lock-chassis {
+    animation: clean-cyber-pulse 4s ease-in-out infinite;
+}
+
+/* PRE-STRUCTURED TEXT STACKS: Active right-aligned layout framework */
+.user-meta-stack {
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+    text-align: right;
+    font-family: inherit;
+    gap: 4px;
+}
+
+.meta-row-primary {
+    font-size: 14px;
+    font-weight: 700;
+    color: #ffffff;
+    letter-spacing: 0.5px;
+}
+
+.meta-row-secondary {
+    font-size: 11px;
+    font-weight: 400;
+    color: #4dabff;
+    opacity: 0.8;
+}
+
+/* Mixed weighting classes pre-staged for detailed user metadata strings */
+.meta-row-large-bold {
+    font-size: 15px;
+    font-weight: 700;
+    color: #ffffff;
+    line-height: 1.2;
+    letter-spacing: 0.25px;
+}
+
+.meta-row-small-regular {
+    font-size: 11px;
+    font-weight: 400;
+    color: #4dabff;
+    opacity: 0.85;
+    line-height: 1;
+}
+
+@keyframes clean-cyber-pulse {
+    0%, 100% {
+        filter: drop-shadow(0px 0px 4px rgba(255, 209, 102, 0.35));
+    }
+
+    50% {
+        filter: drop-shadow(0px 0px 14px rgba(255, 209, 102, 0.65));
+    }
+}

ShopAdmin/Components/_Imports.razor

@@ -9,3 +9,4 @@
 @using ShopAdmin
 @using ShopAdmin.Components
 @using ShopAdmin.Components.Layout
+@using ShopAdmin.Components.Pages

ShopAdmin/Program.cs

@@ -8,6 +8,8 @@ var builder = WebApplication.CreateBuilder(args);
 builder.Services.AddRazorComponents()
     .AddInteractiveServerComponents();
 
+builder.Services.AddCascadingAuthenticationState();
+
 builder.AddMonitoring();
 
 builder.Services.AddControllers();
@@ -33,6 +35,63 @@ builder.Services.AddPostgresHealtchCheck();
 builder.Services.AddQuartzHealtchCheck();
 builder.Services.AddHealthChecksSupport(builder.Configuration);
 
+builder.Services.AddAuthentication(options =>
+{
+    options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
+    options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;
+})
+.AddCookie()
+.AddOpenIdConnect(options =>
+{
+    options.Authority = builder.Configuration.GetSection("IdKongisa:Authority").Value;
+    options.ClientId = builder.Configuration.GetSection("IdKongisa:ClientId").Value;
+    options.ClientSecret = builder.Configuration.GetSection("IdKongisa:ClientSecret").Value;
+
+    options.ResponseType = "code";
+    options.SaveTokens = true;
+
+    options.GetClaimsFromUserInfoEndpoint = true;
+
+    options.MetadataAddress = $"{options.Authority}/.well-known/openid-configuration";
+
+    options.Scope.Clear();
+    options.Scope.Add("openid");
+    options.Scope.Add("profile");
+    options.Scope.Add("email");
+
+    options.TokenValidationParameters = new Microsoft.IdentityModel.Tokens.TokenValidationParameters
+    {
+        NameClaimType = "name",
+        RoleClaimType = "groups"
+    };
+
+    options.Events = new OpenIdConnectEvents
+    {
+        OnRedirectToIdentityProviderForSignOut = async callbackContext =>
+        {
+            var request = callbackContext.Request;
+            string currentBaseUrl = $"{request.Scheme}://{request.Host}{request.PathBase}/";
+
+            callbackContext.ProtocolMessage.PostLogoutRedirectUri = currentBaseUrl;
+
+            var idToken = await callbackContext.HttpContext.GetTokenAsync("id_token");
+
+            if (!string.IsNullOrEmpty(idToken)) callbackContext.ProtocolMessage.IdTokenHint = idToken;
+
+            if (callbackContext.ProtocolMessage.RedirectUri.StartsWith("http://"))
+            {
+                callbackContext.ProtocolMessage.RedirectUri = callbackContext.ProtocolMessage.RedirectUri.Replace("http://", "https://");
+            }
+        }
+    };
+});
+
+builder.Services.Configure<ForwardedHeadersOptions>(options =>
+{
+    options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto;
+    options.KnownProxies.Clear();
+});
+
 var app = builder.Build();
 
 var schedulerFactory = app.Services.GetRequiredService<ISchedulerFactory>();
@@ -53,11 +112,30 @@ app.UseHealthChecks("/health", new HealthCheckOptions
 });
 
 app.UseStatusCodePagesWithReExecute("/not-found", createScopeForStatusCodePages: true);
-app.UseHttpsRedirection();
 
+app.UseHttpsRedirection();
 app.UseAntiforgery();
+app.UseForwardedHeaders();
+
+app.UseAuthentication();
+app.UseAuthorization();
 
 app.MapStaticAssets();
+
+app.MapGet("/auth/login", (string redirectUri = "/") =>
+    Results.Challenge(new AuthenticationProperties { RedirectUri = redirectUri }, [OpenIdConnectDefaults.AuthenticationScheme]));
+app.MapGet("/auth/logout", async (HttpContext context) =>
+{
+    await context.SignOutAsync(CookieAuthenticationDefaults.AuthenticationScheme);
+
+    string currentBaseUrl = $"{context.Request.Scheme}://{context.Request.Host}{context.Request.PathBase}/";
+
+    await context.SignOutAsync(OpenIdConnectDefaults.AuthenticationScheme, new AuthenticationProperties
+    {
+        RedirectUri = currentBaseUrl
+    });
+});
+
 app.MapRazorComponents<App>()
     .AddInteractiveServerRenderMode();
 

ShopAdmin/ShopAdmin.csproj

@@ -20,6 +20,15 @@
     <PackageReference Include="Polly" Version="8.6.6" />
   </ItemGroup>
 
+  <!-- Authentication-->
+  <ItemGroup>
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.8" />
+    
+    <!-- Global Usings -->
+    <Using Include="Microsoft.AspNetCore.Authentication.Cookies"/>
+    <Using Include="Microsoft.AspNetCore.Authentication.OpenIdConnect"/>
+  </ItemGroup>
+
   <!-- UI -->
   <ItemGroup>
     <PackageReference Include="ANM.Blazored.Toast" Version="0.1.1" />
@@ -48,6 +57,8 @@
 
   <!-- Shared Global Usings -->
   <ItemGroup>
+    <Using Include="Microsoft.AspNetCore.HttpOverrides" />
+    <Using Include="Microsoft.AspNetCore.Authentication" />
     <Using Include="Blazored.Toast" />
     <Using Include="Quartz" />
     <Using Include="Mediator" />

ShopAdmin/appsettings.json

@@ -1,4 +1,7 @@
 {
+  "IdKongisa": {
+    "Authority": "https://id.khongisa.co.za/application/o/litecharms-shopadmin"
+  },
   "Email": {
     "Credentials": {
       "Username": "shop@litecharms.co.za"

ShopAdmin/wwwroot/app.css

@@ -1,60 +1,150 @@
+/* --- 1. Variables & Global Reset --- */
+:root {
+    /* --- BRAND CORES --- */
+    --brand-blue: #0096c7;
+    --hover-blue: #4dabff;
+    /* --- NEW CANVAS BALANCE --- */
+    /* Lighter, slate-tinted midnight for the main workspace body */
+    --body-bg: #0b1519;
+    /* Deep obsidian for the fixed navigation anchors */
+    --bar-bg: #03090b;
+    /* The NavShelf background: sits right between the bar and body */
+    --shelf-bg: #070e10;
+    /* --- TYPOGRAPHY & LINES --- */
+    --text-white: #f8f9fa;
+    /* Soft cyan-gray tone for secondary text and structural borders */
+    --payoff-color: #90e0ef;
+    --border-low-opacity: rgba(144, 224, 239, 0.08);
+    --border-mid-opacity: rgba(144, 224, 239, 0.18);
+    --header-height: 92px;
+}
+
 html, body {
-    font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;
+    margin: 0;
+    padding: 0;
+    font-family: 'Poppins', sans-serif;
+    background-color: var(--bar-bg);
+    color: var(--text-white);
+    overflow-x: hidden;
+    height: 100%;
+    display: flex;
+    flex-direction: column;
 }
 
-a, .btn-link {
+/* --- 2. Layout: Top Bar --- */
-    color: #006bb7;
+.top-bar {
+    position: fixed;
+    top: 0;
+    left: 0;
+    right: 0;
+    height: var(--header-height);
+    background-color: var(--bar-bg);
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    padding: 0 1.5rem; /* Balanced horizontal spacing for both sides */
+    z-index: 1000;
+    border-bottom: 1px solid rgba(144, 224, 239, 0.15);
 }
 
-.btn-primary {
+/* --- 3. Branding & Logo --- */
-    color: #fff;
+.brand {
-    background-color: #1b6ec2;
+    text-decoration: none;
-    border-color: #1861ac;
+    display: flex;
+    align-items: center;
+    height: 100%;
 }
 
-.btn:focus, .btn:active:focus, .btn-link.nav-link:focus, .form-control:focus, .form-check-input:focus {
+.brand-mark {
-  box-shadow: 0 0 0 0.1rem white, 0 0 0 0.25rem #258cfb;
+    height: 70px;
+    width: auto;
+    flex-shrink: 0;
+    filter: drop-shadow(0 0 12px rgba(0, 180, 216, 0.5));
+    transition: transform 0.3s ease;
 }
 
-.content {
+.brand:hover .brand-mark {
-    padding-top: 1.1rem;
+    transform: rotate(5deg) scale(1.05);
 }
 
-h1:focus {
+.text-column {
-    outline: none;
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+    padding-left: 16px;
+    margin-left: 8px;
+    height: 70px;
 }
 
-.valid.modified:not([type=checkbox]) {
+.brand-main {
-    outline: 1px solid #26b050;
+    font-size: 1.8rem;
+    font-weight: 800;
+    color: var(--text-white);
+    letter-spacing: -0.5px;
+    line-height: 1;
 }
 
-.invalid {
+.brand-accent {
-    outline: 1px solid #e50000;
+    color: var(--brand-blue);
 }
 
-.validation-message {
+.payoff-line {
-    color: #e50000;
+    font-size: 0.82rem;
+    color: var(--payoff-color);
+    margin-top: 2px;
+    letter-spacing: 0.3px;
+    white-space: nowrap;
 }
 
-.blazor-error-boundary {
+/* --- 4. Page Structure --- */
-    background: url(data:image/svg+xml;base64,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) no-repeat 1rem/1.8rem, #b32121;
+.page-wrapper {
-    padding: 1rem 1rem 1rem 3.7rem;
+    display: flex;
-    color: white;
+    flex-direction: column;
+    flex: 1 0 auto;
+    padding-top: var(--header-height);
+    box-sizing: border-box;
+    background-color: var(--bar-bg);
+    position: relative;
+    transition: padding-right 0.35s cubic-bezier(0.16, 1, 0.3, 1);
 }
 
-    .blazor-error-boundary::after {
+main {
-        content: "An error has occurred."
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    width: 100%;
+    background-color: var(--body-bg) !important;
+}
+
+/* --- Responsive Logic --- */
+@media (max-width: 1200px) {
+    .top-bar {
+        padding: 0 1rem;
+    }
+}
+
+/* --- Custom Scrollbar Branding --- */
+::-webkit-scrollbar {
+    width: 8px;
+    height: 8px;
+}
+
+::-webkit-scrollbar-track {
+    background: var(--bar-bg);
+    border-left: 1px solid rgba(144, 224, 239, 0.05);
+}
+
+::-webkit-scrollbar-thumb {
+    background: var(--brand-blue);
+    border-radius: 10px;
+    border: 2px solid var(--bar-bg);
+}
+
+    ::-webkit-scrollbar-thumb:hover {
+        background: var(--hover-blue);
     }
 
-.darker-border-checkbox.form-check-input {
+* {
-    border-color: #929292;
+    scrollbar-width: thin;
+    scrollbar-color: var(--brand-blue) var(--bar-bg);
 }
-
-.form-floating > .form-control-plaintext::placeholder, .form-floating > .form-control::placeholder {
-    color: var(--bs-secondary-color);
-    text-align: end;
-}
-
-.form-floating > .form-control-plaintext:focus::placeholder, .form-floating > .form-control:focus::placeholder {
-    text-align: start;
-}

litecharms-shopadmin-uat.yml

@@ -7,24 +7,27 @@ metadata:
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: shop-config
+  name: shopadmin-config
   namespace: litecharms-shopadmin-uat
 data:
   ASPNETCORE_ENVIRONMENT: "Development"
   ASPNETCORE_URLS: "http://0.0.0.0:8080"
   Monitoring__Address: "http://aspire-dashboard-service.aspire.svc.cluster.local:18889"
-  Monitoring__ServiceName: "LiteCharms.Shop.Uat"
+  Monitoring__ServiceName: "LiteCharms.ShopAdmin.Uat"
+  IdKongisa__Authority: "https://id.khongisa.co.za/application/o/litecharms-shopadmin"
 ---
 apiVersion: v1
 kind: Secret
 metadata:
-  name: shop-secrets
+  name: shopadmin-secrets
   namespace: litecharms-shopadmin-uat
 type: Opaque
 data:  
   connection-string: SG9zdD0xOTIuMTY4LjEuMTcwO0RhdGFiYXNlPXNob3AtZGV2O1VzZXJuYW1lPXNob3AtZGV2LXVzZXI7UGFzc3dvcmQ9a1ZWbW9XS0ozeHpnUVg7UGVyc2lzdCBTZWN1cml0eSBJbmZvPVRydWU=
   connection-string-quartz: SG9zdD0xOTIuMTY4LjEuMTcwO0RhdGFiYXNlPXNjaGVkdWxlci1kZXY7VXNlcm5hbWU9c2NoZWR1bGVyLWRldi11c2VyO1Bhc3N3b3JkPWtWVm1vV0tKM3h6Z1FYO1BlcnNpc3QgU2VjdXJpdHkgSW5mbz1UcnVl
   aspire-apikey: bWMzRzYzSzJqNVpPRXNpMEFqTW9qTFRYbTFLRVpGY3R6SUlqU3dEaVRHdXQ4cUdTa1B1V3d4R1AxUmJzY0pVbw==
+  auth-clientid: NUxldE5hSERsUlhOWXo1N3FkMVV1RWN4R01uUDNmT3FXc0RHcWdjUg==
+  auth-clientsecret: a3ZxN3k1anc0M0g4WDRjQW91eGRqRDhNNXdxVUhUQ2I4UjNSVjNVWjI4TUZjTk51NWxhM3g3V1ZZRzQ2QnJFMjVPMnhXRmhoeEk0VXNSaFlMTHRqSGRhWWVrUTBmdHpIQ3ZNczV5TXdRdERpcDBkM3QzTkNDa0RtN1JXeW1XSTg=
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -47,11 +50,11 @@ spec:
   replicas: 1
   selector:
     matchLabels:
-      app: shop
+      app: shopadmin
   template:
     metadata:
       labels:
-        app: shop
+        app: shopadmin
     spec:
       affinity:
         nodeAffinity:
@@ -61,7 +64,7 @@ spec:
                   - key: node-role.kubernetes.io/control-plane
                     operator: DoesNotExist
       containers:
-        - name: shop
+        - name: shopadmin
           image: nexus.khongisa.co.za/litecharms-shopadmin:latest
           imagePullPolicy: Always
           resources:
@@ -75,33 +78,43 @@ spec:
             - containerPort: 8080
           envFrom:
             - configMapRef:
-                name: shop-config
+                name: shopadmin-config
           env:
             - name: ConnectionStrings__PostgresScheduler
               valueFrom:
                 secretKeyRef:
-                  name: shop-secrets
+                  name: shopadmin-secrets
                   key: connection-string-quartz
             - name: ConnectionStrings__PostgresShop
               valueFrom:
                 secretKeyRef:
-                  name: shop-secrets
+                  name: shopadmin-secrets
                   key: connection-string            
             - name: Monitoring__Address
               valueFrom:
                 configMapKeyRef:
-                  name: shop-config
+                  name: shopadmin-config
                   key: Monitoring__Address
             - name: Monitoring__ServiceName
               valueFrom:
                 configMapKeyRef:
-                  name: shop-config
+                  name: shopadmin-config
                   key: Monitoring__ServiceName
             - name: Monitoring__ApiKey
               valueFrom:
                 secretKeyRef:
-                  name: shop-secrets
+                  name: shopadmin-secrets
                   key: aspire-apikey
+            - name: IdKongisa__ClientId
+              valueFrom:
+                secretKeyRef:
+                  name: shopadmin-secrets
+                  key: auth-clientid
+            - name: IdKongisa__ClientSecret
+              valueFrom:
+                secretKeyRef:
+                  name: shopadmin-secrets
+                  key: auth-clientsecret
           volumeMounts:
             - name: data
               mountPath: /app/wwwroot/content
@@ -126,12 +139,12 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
-  name: shop-service
+  name: shopadmin-service
   namespace: litecharms-shopadmin-uat
 spec:
   type: ClusterIP
   selector:
-    app: shop
+    app: shopadmin
   ports:
     - name: http
       protocol: TCP
@@ -141,7 +154,7 @@ spec:
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: shop-web-secure
+  name: shopadmin-web-secure
   namespace: litecharms-shopadmin-uat
 spec:
   entryPoints:
@@ -150,7 +163,7 @@ spec:
     - match: Host(`shopadmin.uat.khongisa.co.za`)
       kind: Rule
       services:
-        - name: shop-service
+        - name: shopadmin-service
           port: 80
           sticky:
             cookie: